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Reason A 

Claims 1, 2, 6, 11, and 22-27 
Remarks: 

In Citation 1, for the purpose of invasion, reference is made to making a collection 
which includes'a network connection accompanying process execution; file 
input/output, and events relating to process (reduction), including appearance and 
disappearance related (new process ID). 

Claims 3, 4, 7-9, 12-14 
Citations 1 and 2 

Detecting invasion according to conformance with known invasive patterns is 
already known as recorded (in the left column of p. 61) in Citation 2. 

Claims 5, 10 and 15 
Citations 1*3 

Remarks: 

For example, estabhshing conditions relating to an access source relative to the file 
input/output process, is already known, as recorded (in the right column of p. 137) 
in Citation 3, and as a rule there is nothing exceptional recognized corresponding to 
the conditions and process relating to the access source. 

Claims 28-39 
Citations 1-4 

Remarks: 

As recorded in Citation 4, controlling access relative to an attack is already known. 

Reason B 
Claim 2 
Application 5 



Remarks : 



There is no exceptional difference in comparison with the claim of [0025] of the 
following application 5. 
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Record of the Examination Results relating to Documents of the Prior Art 
- Examined Technical Field: IPC 7th Edition H04L12/00 
Documents of the Prior Art: 
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The record of the examination results relating to documents of the prior art does not 
constitute the grounds for rejection. 



